1110 matches found
UBUNTU-CVE-2022-28890
A vulnerability in the RDF/XML parser of Apache Jena allows an attacker to cause an external DTD to be retrieved. This issue affects Apache Jena version 4.4.0 and prior versions. Apache Jena 4.2.x and 4.3.x do not allow external entities...
PT-2022-18782 · Fusionpbx · Fusionpbx
Name of the Vulnerable Software and Affected Versions: Fusionpbx versions prior to 4.4 Description: The issue concerns a command injection vulnerability. This vulnerability can be exploited via the download email logs function. Recommendations: For Fusionpbx versions prior to 4.4, update to a...
PT-2022-18807 · Skycaiji · Skycaiji
Name of the Vulnerable Software and Affected Versions: Skycaiji version 2.4 Description: The issue is related to a remote code execution RCE vulnerability. It can be exploited via the "/SkycaijiApp/admin/controller/Develop.php" API endpoint. Recommendations: For Skycaiji version 2.4, consider...
webTareas SQL注入漏洞
webTareas is a web-based open source collaboration tool. The product supports project management, bug tracking, content management and meeting management. A SQL injection vulnerability exists in webTareas version 2.4p3 and earlier versions, which stems from the $uq parameter of...
CVE-2021-43741
CMSimple 5.4 is vulnerable to Directory Traversal. The vulnerability exists when a user changes the file name to malicious file on config.php leading to remote code execution...
Appneta Tcpreplay 资源管理错误漏洞
Appneta Tcpreplay is a set of open source utilities for editing and replaying network traffic for UNIX-based operating systems from AppNeta Appneta, USA. A security vulnerability exists in Tcpreplay v4.4.1, no information about the vulnerability is available at this time, please keep an eye on...
PT-2022-18708 · Tcpreplay +2 · Tcpreplay +2
Name of the Vulnerable Software and Affected Versions: Tcpreplay version 4.4.1 Description: The issue is related to a heap-based buffer over-read in the get ipv6 next function located in common/get.c. This problem can potentially lead to information disclosure or other security issues...
CVE-2021-40766
Adobe Character Animator version 4.4 and earlier versions are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction i...
Tiny File Manager路径遍历漏洞
Tiny File Manager is a web-based open source file manager. A path traversal vulnerability in the tinyfilemanager.php file upload function in Tiny File Manager 2.4.1 allows remote attackers to upload malicious PHP files to the webroot using a valid user account and achieve code execution on the...
CVE-2021-44662
A Site Scripting XSS vulnerability exists in the Xerte Project Xerte through 3.8.4 via the link parameter in print.php...
HPESBST04254 rev.1 - HPE Fibre Channel and SAN Switches with Brocade Fabric OS (FOS) Prior to v8.0.1b and v7.4.1d, Disclosure of Privileged Information
Potential Security Impact: Remote: Disclosure of Privileged Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE B-series SN6000B Fibre Channel Switch -Prior to v8.0.1b HPE B-series SN3600B Fibre Channel Switch -Prior to v8.0.1b HPE B-series SN4000B SAN Extension Switch...
PT-2022-1766
Name of the Vulnerable Software and Affected Versions Expat aka libexpat versions prior to 2.4.5 Description The issue is related to insufficient input validation in the xmlparse.c component of the Expat library, allowing attackers to insert namespace-separator characters into namespace URIs. Thi...
Zabbix Sia Zabbix 安全漏洞
Zabbix Sia Zabbix is an open source monitoring system from the Latvian company Zabbix SIA Zabbix Sia. Zabbix 4.0 LTS, 4.2, 4.4 and 5.0 LTS versions are vulnerable due to a lack of filtering and escaping of user submitted command parameters. Any user with the "Zabbix Administrator" role can run a...
UBUNTU-CVE-2022-23990
Expat aka libexpat before 2.4.4 has an integer overflow in the doProlog function...
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior 7.5.24 and prior 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Cluster accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS 3.1 Base Score 2.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L).
...
OPENSUSE-SU-2022:0091-1 Security update for apache2
This update for apache2 fixes the following issues: Apache2 was updated to the current stable version 2.4.51 jscSLE-22733 jscSLE-22849 It fixes all CVEs and selected bugs represented by patches found between 2.4.23 and 2.4.51. See https://downloads.apache.org/httpd/CHANGES2.4 for a complete chang...
CVE-2021-45521
Certain NETGEAR devices are affected by a hardcoded password. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 before 4.4.0.10...
CVE-2021-44207
Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials...
HPESBGN04222 rev.1 - HPE Dynamic SIM Provisioning (DSP), Apache Log4j 2 Remote Arbitrary Code Execution and Remote Code Execution
Potential Security Impact: Remote: Arbitrary Code Execution, Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Dynamic SIM Provisioning DSP - DSP3.3, DSP3.1, DSP3.4 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-44228 |...